Skip to content
This repository was archived by the owner on May 14, 2020. It is now read-only.

Commit d6752a3

Browse files
committed
Make rule 933100 RE2 compatible
1 parent e761ae6 commit d6752a3

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,9 +43,7 @@ SecRule TX:EXECUTING_PARANOIA_LEVEL "@lt 1" "id:933012,phase:2,pass,nolog,skipAf
4343
# Therefore, that pattern is now checked by rule 933190 in paranoia levels
4444
# 3 or higher.
4545
#
46-
# Not supported by re2 (?!re).
47-
#
48-
SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?:<\?(?!xml\s)|<\?php|\[(?:/|\\\\)?php\])" \
46+
SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?:<\?(?:[^x]|x[^m]|xm[^l]|xml[^\s]|xml$)|<\?php|\[(?:\/|\\\\)?php\])" \
4947
"id:933100,\
5048
phase:2,\
5149
block,\

0 commit comments

Comments
 (0)